← Back to browse · API

CVE-2024-42745

Severity
CRITICAL
CVSS
9.8
EPSS
0.01663
Risk score
39.78
CISA KEV
No
PoC
No
Published
2024-08-12
Modified
2024-08-13
First seen
2026-08-07
Aliases
EUVD-2024-39758, GHSA-WX8V-RVWG-8393
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-39758

Description

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.

References